Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer (raw, json)
Hash identifier: /76IpzdHm8UwxOSIEx57Y4C4lxUnw0VqJEaCsR/pu0c=
Subject key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 64FC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 15 May 2025 14:41:33 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 148.109.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Jun 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25852 (0x64fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 15 14:41:33 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:a4:b8:e6:95:cd:fc:12:4a:e9:c0:6f:cc:
21:24:4d:00:59:cd:c4:ea:76:e0:61:e0:c7:43:28:
c8:f3:75:9d:63:36:1e:e9:2d:02:8b:60:e1:89:70:
8c:0e:61:38:a6:2a:1c:d6:e4:5e:ab:c2:43:58:b2:
ae:72:77:5b:66:cf:e6:55:9c:ca:d7:69:ba:bc:2c:
36:d4:c6:0a:88:0a:fb:0e:86:28:fa:63:a3:c4:77:
ec:56:13:43:8b:8f:54:aa:44:0f:7b:a0:7e:d4:41:
a7:93:72:1d:68:22:02:65:44:79:f0:e8:32:92:12:
a0:f2:ac:7f:d5:b9:1c:fd:26:11:a4:bd:25:b2:1d:
de:e2:60:46:ce:e0:20:e3:80:cb:d5:76:8a:5e:e2:
6c:45:38:d9:c0:8c:46:cf:be:e3:b8:77:be:95:df:
ac:30:e9:13:51:54:31:4e:26:0c:0e:b4:e2:2c:57:
12:96:5d:0f:de:2c:cb:ce:67:c4:66:99:35:e0:51:
3c:a0:93:01:c4:d8:fe:d1:4f:fe:93:05:06:13:9f:
b7:38:37:11:a6:44:b1:d8:d3:dd:74:18:1a:59:1a:
2e:a3:d2:7e:45:4c:e7:83:8c:4d:75:35:db:cc:5e:
88:32:ca:e4:39:d1:51:82:22:dc:02:47:93:71:6c:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:d3:9a:d2:41:1d:f7:45:b2:1f:0f:10:a5:02:79:0e:2a:c0:
5f:fc:89:cd:04:65:9d:6c:c7:90:58:20:b9:a1:6e:9d:04:f7:
3c:8b:67:53:e3:b6:fa:72:63:b3:33:97:3e:a6:84:2b:1f:a2:
86:05:5a:f4:39:dc:5d:b5:59:c1:a2:a7:b1:e8:72:14:19:97:
d8:22:86:ae:a5:02:70:73:d8:3b:21:b4:ea:04:45:4c:21:aa:
69:bf:fa:38:b6:01:15:dc:df:8c:50:04:a9:37:ab:e5:e4:5d:
3f:8c:66:de:31:72:77:48:38:45:67:5f:4c:75:85:da:6d:c4:
a9:02:62:09:e3:1b:c7:d0:ce:19:37:54:b0:08:33:da:2d:2b:
23:fe:37:dc:1f:cf:c0:80:cf:6e:67:54:6a:aa:b3:71:d2:3a:
0e:2f:ef:af:88:4e:0d:06:c2:1c:d7:ec:cb:d8:78:72:1e:a9:
0b:a1:ea:7d:fa:ff:8c:b0:ea:47:c3:ef:57:f8:25:3d:fa:8e:
f7:e0:41:e0:ca:43:13:81:28:b9:25:9b:45:05:eb:70:17:26:
47:49:15:da:61:2c:bf:27:13:f7:bc:f9:9d:49:43:fc:21:aa:
30:1a:1e:97:f5:95:96:14:76:cd:6a:3e:6e:89:23:4f:f7:7c:
fd:4c:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 08:04:15 2025 by rpki-client